6544859e10dc3f82b9497f0e6c34e7a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6544859e10dc3f82b9497f0e6c34e7a6_JaffaCakes118
Size

757KB
MD5

6544859e10dc3f82b9497f0e6c34e7a6
SHA1

4832fcecc9cb994dee454f7c7069e65a912e238a
SHA256

bcaae62cc59e9d606a5cf419d337bc50a7f9d0b428bd25da551e64dd1ee57768
SHA512

a768391cd6d3e58a686df2f8910096da81d566c420edf004e0e93de723a9b3f76a17b36b943e39597d1f9ed2f6e59e6468adc65f56864fb4b7f033b270302baf
SSDEEP

12288:vIZAZxO8Q+5sgX2suBDiYfLq6bKTQCzOqxZ7eRfRXhdbqmqTMxV+9Nq1vV:vIW3Q++AuBDHhGeCZ7MXhgmq4zsq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6544859e10dc3f82b9497f0e6c34e7a6_JaffaCakes118

Files

6544859e10dc3f82b9497f0e6c34e7a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e15e05d155d9300a0ce3ab3691015fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ResetWriteWatch
CreateEventA
GetThreadSelectorEntry
SetConsolePalette
GetComputerNameA
GlobalCompact
GetConsoleCursorMode
SetFileApisToOEM
GetNamedPipeHandleStateA
GetStringTypeExA
GetCompressedFileSizeW
CommConfigDialogA
LockResource
EnumTimeFormatsA
ReadConsoleOutputCharacterA
TerminateProcess

user32

WinHelpW

Sections

CODE
Size: 13KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 740KB - Virtual size: 743KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE